CVE-2018-15768

Insecure MySQL Configuration Vulnerability

MEDIUM 6.5EPSS 9.1%

Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database.

Affected: Dell · OpenManage Network Manager
CVSS v3.0 NVD: 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 NVD: 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
EPSS: 9.05% chance of exploitation in the next 30 days, 95th percentile
Published: 2018-11-30
Updated: 2024-09-17

ExploitDB entries (1)

https://www.exploit-db.com/exploits/45852

Security advisories

https://www.dell.com/support/article/us/en/04/sln314610/dell-openmanage-network-manager-s…
http://www.securityfocus.com/bid/105914

References

CVE Record
NVD entry